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A Method for Providing Virtual Private Network Services 
Field of the Technology 

The present invention relates to intelligent network service, more particularly to a 
method for providing Virtual Private Network (VPN) services. 

5 Background of the Invention 

A VPN is a kind of network disposed in a public network infrastructure. The whole 
VPN network is a logic network constructed upon a network platform provided by a 
public network service provider, and there is no end-to-end physical link as required in a 
traditional private network between any nodes of the VPV network. User data are 
10 transmitted through logic links. A VPN service is a kind of intelligent network services. 
Its main object is to define telephone users of a company or a team as one group, and 
allocate each user within this group with a short number which can be used inside the 
group, and users within this group can directly call one another by dialing the short 
number. 

15 To resolve the problem of user's malicious overdrawing, it is feasible to adopt 

prepaid services. A prepaid service is an important service provided by an intelligent 
network. A prepaid user needs to deposit a certain amount of fee in his prepaid account 
before calling and communication fee will be deducted from the corresponding account 
real-timely. If the fee in the account is used up, the corresponding user terminal cannot 

20 initiate a call until this account is recharged. 

Operators expect to gradually expand the amount of prepaid users because the 
prepaid service is of great guarantee. However, since both the VPN service and the 
prepaid service belong to intelligent network services that are with certain limitations that 
different services are independent, prepaid service users cannot use other intelligent 

25 services of an intelligent network. For instance, at present a prepaid user is not capable of 
joining a VPN group as a member to utilize VPN services. Meanwhile, the number of 
prepaid users is continuously increasing currently. However, a user will not be able to 
enjoy a VPN service simultaneously once applying for a prepaid service, which brings 
great limitations for operators' VPN service expansion. 
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Summary of the Invention 

Therefore, a main object of the present invention is to provide a method for 
providing a Virtual Private Network (VPN) service that supports prepaid users to utiUze 
VPN services, so as to expand application area of VPN services. 
5 A method for providing a VPN service according to the present invention comprises 

the steps of: 

A. after receiving a call request for a VPN service from a user terminal, a Service 
Control Point (SCP) judging whether the user terminal has applied for a prepaid service at 
the same time, if so, executing step B, otherwise directly providing the VPISF service for 

10 the user terminal and ending the current flow; and 

B. initiating a VPN service logic, invoking a prepaid service logic by the VPN 
service logic, and deducting fee from a prepaid account corresponding to the user 
terminal while providing the VPN service to the user terminal. 

Step A may ftirther comprise the step of implementing VPN service authentication 
15 for the user terminal. If the user terminal passes the VPN service authentication, the step 
of judging whether the user terminal has applied for the prepaid service at the same time 
will be executed, otherwise a VPN service authentication failxire message will be returned 
to the user terminal and the current flow will be ended. 

Before step B, the method may ftirther comprise the step of implementing prepaid 
20 service authentication for the user terminal. If the user terminal passes the prepaid service 
authentication, step B will be executed, otherwise a prepaid service authentication failure 
message will be retumed to the user terminal and the current flow will be ended. 

Implementing the prepaid service authentication for the user terminal is implemented 
by invoking the authentication interface set for the prepaid service. The step of 
25 implementing the prepaid service authentication for the user terminal comprises the steps 
of: judging whether the user terminal's corresponding prepaid account is valid and 
judging whether there is sufficient balance in the prepaid account. 

Preferably, the method ftirther comprises the step of presetting a fee-applying 
interface for the prepaid service. Before providing the VPN service for the user terminal, 
30 step B ftirther comprises: 

the VPN service logic invoking the fee-applying interface, the prepaid service logic 
applying for fees and notifying the VPN service logic of a fee application result; and 
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the VPN service logic judging whether the fee is obtained according to the fee 
application result, if so, providing the VPN service for the user terminal according to the 
fee application result, otherwise ending the current flow directly. 

Preferably, the method further comprises the step of presetting a fee-deducting 
5 interface for the prepaid service. The deducting operation in step B comprises: 

when the call is finished, the VPN service logic invoking the fee-deducting interface 
and sending a fee-deducting request to the prepaid service logic, the prepaid service logic 
deducting a certain amount of fee firom the applied fee after receiving the request. 

Preferably, the method further comprises the step of presetting a fee-returning 
10 interface for the prepaid service. After the deducting operation in step B, the method 
further comprises: the VPN service logic judging whether there is remaining fee in the 
applied fee, if so, invoking the fee-returning interface and returning the remaining fee to 
the prepaid account corresponding to the user terminal; otherwise ending the current flow 
directly. 

15 It can be seen firom the technique scheme of the present invention, after receiving a 

VPN service request, a SCP continues to judge whether the user terminal has applied for a 
prepaid service. If the user terminal applying for VPN service has applied for prepaid 
service, the VPN service logic will invoke prepaid service logic by invoking the preset 
prepaid service interface so that prepaid service users can also utilize VPN services. In 

20 this way, no only prepaid users are facilitated, but also a problem which long-harasses 
operators is resolved, so that the operators can popularize VPN service among numerous 
prepaid service users with great economic interests for the operators. 

Brief Description of the Drawings 

Figure 1 is a flowchart illustrating a VPN service according to the present invention. 

25 Detailed Description of the Invention 

To make the object, technique scheme and advantages of the present invention clear, 
the present invention will be described in detail hereinafter with reference to 
accompanying drawings and embodiments. 

The key idea of the present invention is: a user terminal with fimctions of both a 
30 VPN service and a prepaid service sends a call request for a VPN service to a SCP; after 
receiving this request, the SCP implements VPN service authentication for this user 
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terminal at first. If the user terminal passes the VPN service authentication, the SCP 
continues to implement prepaid service authentication for this user terminal, such as 
determining whether there is available fee in the prepaid account corresponding to the 
user terminal. If there is available fee in the corresponding prepaid account, the user 
5 terminal is allowed to implement a call and communication fee will be deducted fi-om the 
prepaid account corresponding to the user terminal. 

To realize the above-mentioned key idea, priority of VPN service is set higher than 
that of prepaid service in the present invention, thereby when a user terminal applying for 
both VPN and prepaid intelligent services starts a call, the VPN service with higher 

10 priority is firstly initiated and then the prepaid service is initiated through service 
invoking. Similar to function invoking, service invoking is to define various independent 
functions as invoking interfaces which are similar to functions in a prepaid service and to 
publicize these interfaces for other services to invoke. Certainly, various function 
interfaces set in a prepaid service can be extended on need of other services upon the 

15 prepaid service. With these function invoking interfaces, other services to be prepaid will 
invoke these relevant interfaces to utilize various functions of a prepaid service. Because 
each service in an intelligent network is fulfilled through corresponding service logic, the 
service logic used to implement VPN service is called VPN service logic and the service 
logic used to implement prepaid service is called prepaid service logic. 

20 In order to realize invoking for prepaid services, relevant function invoking 

interfaces of a prepaid service is defined, the interface including: authentication interface, 
fee-applying interface, fee-deducting interface and fee-retuming interface. Utilization of 
prepaid service by other services generally requires using fee in the prepaid account, but 
according to service characteristic of a prepaid service, authentication is necessary before 

25 fee in the prepaid account is used, thus an authentication interface is defined. At present, 
authentication processing mainly includes determining prepaid account balance, valid 
period of a prepaid user, minimum threshold of a prepaid user account, whether the user 
reports a loss, whether the user is blocked, etc. As the fee in a prepaid account is for 
multiple utilities, the user must apply to use the fee in the prepaid account and caimot use 

30 the service before acquiring the applied fee, thus a fee-applying interface is defined in 
order to transmit information when a user applies for fees.- After the fee in the prepaid 
account is used for VPN service, to guarantee accuracy of the fee in the prepaid account, 
relevant fee should be deducted from the prepaid user*s accoxmt real-timely, thus a fee 
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deducting interface is defined to notify interface parameters used in deduction by prepaid 
service. After the user finishes VPN service, the remaining fee must be returned to the 
prepaid account if there is any in the apphed prepaid service account, so as to guarantee 
the accuracy of fee in the prepaid account, thus a fee-returning interface is defined in the 
5 present invention. 

After defining the above interfaces, with reference to figure 1, a specific procedure 
of providing a VPN service for a prepaid service user according to the present invention is 
as follows: 

Steps 101-102: a user terminal sends a call request to a SCP, requesting for a VPN 

10 service. The SCP implements authentication for this user terminal after receiving the call 
request and judges whether this user terminal has signed a contract for VPN service 
according to this user terminal's contract information. If so, the SCP will initiate a VPN 
service logic. Then, the SCP fiirther judges whether the user terminal has signed a 
contract for prepaid service according to the user terminars contract information, if so, a 

15 VPN service logic will invoke authentication interface of the prepaid service to send an 
authentication request to the prepaid service logic, and then step 103 will be executed. If 
the user terminal has a contract for VPN service but has not a contract for prepaid service, 
the user terminal will be provided with traditional VPN service; if the user terminal has 
no contract for VPN service, the VPN service is failed and current call is ended. 

20 Steps 103-104: after receiving an authentication request fi:om a VPN service logic, 

the prepaid service logic implements authentication for this user terminal and notifies the 
VPN service logic of the authentication result. Here, the processing of prepaid service 
authentication mainly includes judging whether the corresponding prepaid account of the 
user terminal is valid and whether there is sufficient balance in the account. 

25 Steps 105-107: after receiving the prepaid service authentication result, the VPN 

service judges whether the prepaid service authentication passes according to the 
authentication result, if so, the VPN service invokes a fee-applying interface and sends a 
fee application request to the prepaid service logic, otherwise, the VPN service is failed 
and the current call flow is ended. After receiving this fee application request, the prepaid 

30 service logic judges whether there is sufficient fee in the user terminars corresponding 
prepaid account, if so, allocates a certain amount of fee for this user terminal, namely 
freezing the certain amount of fee in the account and rejecting other services to utilize this 
part of fee, and then notifies the VPN service logic of fee application result. Otherwise, 
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the prepaid service logic notifies the VPN service logic of the fee application result that 
no fee is applied. After receiving the fee application result, the VPN service logic judges 
whether the fee is obtained according to the fee application result, if so, continues to 
execute subsequent steps, otherwise ends the current flow directly. Here, this user 
5 terminars corresponding prepaid account may provide prepaid services of multiple 
intelligent services simultaneously, so judging of whether there is available fee is to judge 
whether there is available fee in this user terminal's corresponding prepaid account to be 
provided for the VPN service. 

Steps 108-'lll: after receiving the notification of obtaining fee for the VPN service, 

10 the VPN service logic starts a call, monitors the call and calculates the fee of current call 
when the call is over, and invokes fee-deducting interface of the prepaid service to deduct 
fee fi*om the prepaid account. If the deducted fee is less than applied fee, namely there is 
still remainder in the applied fee, the VPN service logic will continue to invoke 
fee-retuming interface and retum the remaining fee to the corresponding prepaid account, 

15 which means to defreeze the frozen remaining fee so that other services can utilize this 
part of fee. And then the prepaid service logic is notified that processing is over. Certainly, 
if there is no fee remained, such step as retximing fee can be omitted. 

It can be seen from the embodiment above, with the present invention, a user can 
sign a VPN service and a prepaid service in a SCP at the same time. When a user sends a 

20 call request, the SCP initiates a VPN service logic. And during the processing of a VPN 
service, the VPN service logic triggers a prepaid service logic, so that a prepaid service 
user is capable of enjoying a VPN service. 

The method of the present invention can be applied in various intelligent networks, 
such as CDMA-based intelligent network or GSM-based intelligent network. 

25 While the invention has been shown and described with reference to a preferred 

embodiment thereof, it will be understood by those skilled in the art that various changes, 
equal substitution and improvement in form and details may be made therein without 
departing from the spirit and scope of the invention as defined by the appended claims. 
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